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In the claims: 



1 . \ (currently amended) A method for use in a distributed system for processing a 
mobile program^that has the ability to move from node to node in the distributed system 
comprising 

including, in\m a mobile program operating envirormient in each of the nodes, providing 
service facihties usefukto the mobile program, and 

in the operating environment, in each of the nodes, rurming a supervisor process that 
allows the mobile program\ndirect access to make use of the service facihties. 

2. (previously amended) The method of claim 1 further comprising creating a 
bastion object in an unrestricted environment to protect the unrestricted environment and passing 
it into a restricted envirormient within which the mobile program is running. 

3. (previously amended) The method of claim 2 in which the bastion object provides 
an interface for the mobile program to^access the service facilities in a safe manner and which is 
substantially the same interface as the interface that the service facilities provide in the 



,.\ 



unrestricted envirormient. 

4. (previously amended) The method of claim 2 in which the bastion object performs 
type checking on all method calls made by amiobile program to a service facility. 

5. (previously amended) A method for use in a distributed system for processing a 
mobile program that executes in one node of tha distributed system, may be interrupted at almost 
any point in its execution, and may be moved to Mother node of the distributed system for 
further execution, comprising ^ 

in the one node, capturing a current state of the mobile program execution, 
delivering the captured state and program codX)f the mobile program to the other node, 

and 

continuing execution at the other node from the po\nt of interruption based on the 
captured state and the program code. 

6. (previously amended) The method of claim 5 fiirther comprising 
also delivering with the captured state and the program cpde a transported file system or 

other information created during execution of the mobile progra 
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7. ^(previously amended) The method of claim 6 in which the information in the 
transported file system or other information is accessible without executing the mobile program. 

8. (oi^ginal) The method of claim 5 in which the step of capturing comprises using 
an encoding scheme of a language interpreter. 

9. (previously amended) A method for enabling communication with a mobile 
program ruiming in aMistributed system, a mobile program service station, an extension, or 
another application, comprising 

providing a mechanism which permits each of mobile program, the mobile program 
service station, the extension, and the other apphcation to identify services that )s provides, and 
permits each of them to fmd\^ervices that it needs, and 

enabling the mobile pr(^gram to communicate with mobile program service stations via 
objects associated with the mechanism. 

10. (previously amended) The method of claim 9 in which each of the objects is 
provided by a supervisor process iTjjnning in the distributed system and prevents uncontrolled 
access to a needed service. 

1 1 . (previously amended) The method of claim 9 in which the mechanism includes a 
broker and a manager. 

12. (previously amended) Th^method of claim 9 in which the objects are data typed. 

13. (previously amended) A melhod for enabling negotiation between two unrelated 
mobile programs, mobile service stations, extensions, or other applications, in a distributed 
system, comprising 

in an operating environment in a node oYthe distributed system, receiving information 
from one of the two mobile programs, mobile program service stations, extensions, or other 
applications, concerning a transaction offered to ot^jer mobile programs, mobile program service 
stations, extensions, or other applications, 

in the operating environment in the node, receiVing information from the second of the 
two mobile programs, mobile programs service stations,\extensions, or other applications 
concerning a transaction in which the second of the mobile^rograms, mobile program service 
stations, extensions, and other applications wishes to engage, 
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notifyiW the second mobile program, mobile program service station, extension, or other 
application of tli^ one mobile program, mobile program service station, extension, or other 
application, and 

enabling th^two mobile programs, mobile program service stations, extensions, or other 
applications to communicate concerning the transaction. 

14. (previously amended) The method of claim 13 in which the information is 
received from two mobile programs by a third mobile program. 

15. (previously amended) A method for enabling action by an operating environment 
in a distributed system witk respect to a mobile program which is programmed in a language that 
is not fully supported by theVperating environment, comprising 

labeling a mobile program to identify operating environment features required for full 
support of the mobile program,^ 

in an operating environm^t, examining the labeling of the mobile program to determine 
whether the operating environmenusupports all of the identified features, and 

taking an action based on whWher all the identified features are supported. 

16. (previously amended) me method of claim 15 wherein the action comprises 
sending the mobile program to another operating environment for processing. 

17. (previously amended) The inethod of claim 15 in which the action comprises 
retrieving nonprogram specific data from tnfe mobile program. 

18. (original) A method for aidingVommunication with a mobile program executing 
in operating environments provided at nodes om distributed system, comprising 

maintaining a name space that uniquely identifies types of information to be interchanged 
as part of the communication, and 

using a name within the name space to identiW a type of information to be interchanged. 

19. (original) The method of claim 18 in which the mobile program registers an 
interface which includes the name of a type of information that is to be interchanged. 

20. (cancelled) A method for controlling the timing of execution of an action 
associated with a mobile program running in an operating environment provid4d at a node of a 
distributed system, comprising \^ 

providing a trigger protocol in the operating environment, 
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enabling the mobile program to register a condition with the operating envirormient, 
causing the operating environment to trigger the execution of the action upon the occurrence of 
the condition. \ 

21 . (cancelled) The method of claim 20 in which the trigger protocol defines trigger 
statements each of whrch identifies at least the condition and the action. 

22. (cancelled) The method of claim 20 in which the operating environment maintains 
a table of registered trigger expressions for all mobile programs that have registered conditions. 

23. (cancelled) The method of claim 20 in which the execution is triggered by a 
program contained in the mobile program. 

24. (previously arnfended) A method for controlling interaction between a mobile 
program and an application ruiming in an operating environment provided at a node of a 
distributed system, comprising \ 

defining a trusted portion of the operating environment which provides trusted services to 
the mobile program, \ 

requiring portions of the application rurming in the operating environment to be 
registered as trusted, and \ 

permitting indirect interaction via the operating environment between the mobile program 
and the application running in the operating environment only if the portions of the application 
required to be registered have been registered. 

25. (previously amended) A memod for enabling a mobile program to carry out 
defined fiinctions including otherwise unsafe mnctions, through the use of extensions comprising 

coding safe extensions to an operating eiivironment and to an interpretive language under 
which the mobile program runs, and \ 

permitting the mobile program to carry out\he defined fiinctions by making use of the 
extensions. \ 

26. (new) The method of claim 9 in which\he mechanism comprises a cormector 
mechanism, and the objects comprise connector objects^ 

27. (new) The method of claim 1 in which the\service facilities of the operating 
environment are used to access other resources not part of me operating environment. 
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28, (new) The n^thod of claim 1 in which the supervisor process prohibits 
unauthorized access to the service facilities of the operating environment. 



